Shopify Awards $116,000 to Hackers in Canada: h1-514 Recap

HackerOne and Shopify hosted a live hacking event (h1-514) in Montréal where 40 researchers from 12 countries reported 55 valid vulnerabilities and were awarded over $116,000 in bounties; notable findings included a patched remote code execution in Shopify’s Kit and an SSRF bypass bonus. The post highlights event logistics, disclosed bug fixes, special bonuses (including an Oldest Bug bonus), and the event winners, and emphasizes that reported issues were triaged and resolved during the event.